> Markdown version of [/jobs/ext/3876162-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/3876162-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Analyst

- **Company:** Sprezzatura Management Consulting
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Salary:** $90,000.0 - $100,000.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Configuration Management, Cyber Security, Software Vulnerability Management, Information Security Management System, Servicenow, Vulnerability Analysis
- **Published:** October 22, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=6a0e9f0e13538275

## About the Role

* Bachelor Degree and experience will be considered in lieu of the degree
 * Experience supporting federal cybersecurity programs, preferably within the Department of Veterans Affairs
 * Strong knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, and federal security authorization processes
 * Experience with ServiceNow CAM, eMASS, or similar Governance, Risk, and Compliance (GRC) tools
 * Experience developing ATO packages, managing POA&Ms, and coordinating continuous monitoring activities
 * Familiarity with vulnerability management, security assessments, and federal privacy requirements
 * Strong analytical, technical writing, communication, and stakeholder coordination skills
 * Experience serving as a System Steward, ISSO, Cybersecurity Engineer, or RMF Specialist for at least 3 years
 * Familiarity with VA cybersecurity policies, procedures, and authorization requirements
 * Relevant certifications such as CISSP, CISM, CGRC, CISA, or CompTIA Security+

## Description

Sprezzatura is seeking a Cyber Security Analyst to join our team supporting (Veterans Health Administration (VHA) Enrollment System (VES). In this role you will be responsible for supporting the system's Authority to Operate (ATO), maintaining security authorization documentation, coordinating continuous monitoring activities, and ensuring compliance with FISMA, NIST Risk Management Framework (RMF), and VA cybersecurity requirements. This is an excellent opportunity for someone who is passionate about cybersecurity and helping our veterans., * Serve as the VES System Steward within VA's ServiceNow Continuous Authorization and Monitoring (CAM) platform

 * Develop, maintain, and coordinate ATO authorization packages, including security controls, implementation statements, and supporting evidence
 * Support security authorization and continuous monitoring activities in accordance with FISMA, NIST SP 800-53 Rev. 5, and VA policies
 * Maintain and update security documentation, including the System Security Plan (SSP), Configuration Management Plan (CMP), Privacy Threshold Analysis (PTA), Privacy Impact Assessment (PIA), and other required artifacts
 * Coordinate vulnerability assessments, penetration testing, security control assessments, and remediation activities
 * Develop, maintain, and track Plans of Action and Milestones (POA&Ms), including remediation schedules and closure evidence
 * Coordinate with System Owners, ISSOs, Privacy Officers, technical teams, and VA cybersecurity stakeholders to address security and compliance requirements
 * Maintain system authorization boundary documentation, including minor applications, system interconnections, and security impact analyses
 * Monitor security risks, authorization milestones, and compliance activities, providing regular status reports to program leadership
 * Support security audits, assessments, and ongoing authorization activities to maintain the VES security posture.